Matching is done based on field1 OR field2 OR field3 etc. Wildcards are supported, except for the realIP field, which must be blank or an IPv4 dotted quad.